AZ104-Q: give a web app private inbound access
A line-of-business App Service must be reachable privately from a VNet and not from the public Internet. Which inbound design should the administrator evaluate?
- A) A public IP on every client.
- B) App Service Private Endpoint with the required private DNS configuration, then restrict public access as appropriate. ✓
- C) A VM custom script extension.
- D) A storage lifecycle rule. Answer: B. Private Endpoint gives the service a private network endpoint; DNS must resolve clients to it. Why not the others: The alternatives do not provide private inbound web-app connectivity.